๐ฉ๐ช
tentwentyfour
2026-10-06 21:48:40
(5 hours ago)
178.128.83.141 - - [06/Oct/2026:23:47:00 +0200] "POST /wp-login.php HTTP/1.1" 200 3153 "https://www. ...
show more
178.128.83.141 - - [06/Oct/2026:23:47:00 +0200] "POST /wp-login.php HTTP/1.1" 200 3153 "https://www.demo.debug.lu/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
178.128.83.141 - - [06/Oct/2026:23:47:15 +0200] "POST /wp-login.php HTTP/1.1" 200 3149 "https://www.demo.debug.lu/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15"
178.128.83.141 - - [06/Oct/2026:23:47:29 +0200] "POST /wp-login.php HTTP/1.1" 200 3149 "https://www.demo.debug.lu/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:121.0) Gecko/20100101 Firefox/121.0"
178.128.83.141 - - [06/Oct/2026:23:47:41 +0200] "POST /wp-login.php HTTP/1.1" 200 3151 "https://www.demo.debug.lu/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0"
178.128.83.141 - - [06/Oct/2026:23:47:54 +0200] "POST /wp-login.php HTTP/1.1" 200 3
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
usc-IPDB
2026-10-06 17:16:11
(10 hours ago)
178.128.83.141 - - [06/Oct/2026:19:14:52 +0200] "GET /wp-login.php HTTP/1.1" 200 3271 "https://www.f ...
show more
178.128.83.141 - - [06/Oct/2026:19:14:52 +0200] "GET /wp-login.php HTTP/1.1" 200 3271 "https://www.facebook.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15"
178.128.83.141 - - [06/Oct/2026:19:15:51 +0200] "POST /wp-login.php HTTP/1.1" 200 4503 "https://uschneider-is.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
178.128.83.141 - - [06/Oct/2026:19:16:10 +0200] "GET /wp-login.php?redirect_to=https%3A%2F%2Fuschneider-is.de%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 3288 "https://uschneider-is.de/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
...
show less
Port Scan
๐บ๐ธ
thieuleu
2026-10-06 09:14:39
(18 hours ago)
Unauthorized connection attempt blocked by firewall policy. Web application hardening active.
Bad Web Bot
Anonymous
2026-10-06 02:15:30
(1 day ago)
Web attack blocked by Wordfence on limburgsekunstkring.nl (19 hits). Reported by CRMON.
Web App Attack
๐ช๐ธ
XiDeRo
2026-10-05 02:47:02
(2 days ago)
IP bloqueada por puntuaciรณn de karma acumulada (Guardian Web v2).
Port Scan
Web App Attack
๐ฉ๐ช
FD-IX
2026-10-04 20:39:53
(2 days ago)
Fail2Ban: WordPress brute-force attack detected.
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-04 02:44:53
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 178.128.83.141 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.83.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 22:44:47.277688 2026] [security2:error] [pid 30475:tid 30475] [client 178.128.83.141:49392] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||verdeprofundo.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "verdeprofundo.net"] [uri "/wp-json/wp/v2/users"] [unique_id "asG9n_7iOSxBcEZdB4smDAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-10-04 02:00:02
(3 days ago)
26.533 requests in 1 hour (3d7h59m)
Brute-Force
Bad Web Bot
๐ณ๐ฑ
Alt255
2026-10-04 01:33:54
(3 days ago)
[ti-04al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpr ...
show more
[ti-04al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 178.128.83.141 - - [04/Oct/2026:03:32:53 +0200] "POST /wp-login.php HTTP/1.1" 503 19734 "https://voedselboshoorn.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15"
178.128.83.141 - - [04/Oct/2026:03:33:13 +0200] "POST /wp-login.php HTTP/1.1" 503 24463 "https://voedselboshoorn.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15"
178.128.83.141 - - [04/Oct/2026:03:33:32 +0200] "POST /wp-login.php HTTP/1.1" 503 24463 "https://voedselboshoorn.nl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
voedselboshoorn.nl:
...
show less
Brute-Force
Web App Attack
๐ฎ๐น
VHosting
2026-09-01 02:45:04
(1 month ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ฉ๐ช
thesimonmanuel
2026-09-01 02:40:59
(1 month ago)
178.128.83.141 - - [01/Sep/2026:08:10:58 +0530] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 302 5 "- ...
show more
178.128.83.141 - - [01/Sep/2026:08:10:58 +0530] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "-"
show less
Web App Attack